Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-30285
9.8
CRITICALCVSS v3
Published
March 31, 2026
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.
NPM
lorenzofox3/zora
GitHubLightest, yet Fastest Javascript test runner for nodejs and browsers
GitHubLightest, yet Fastest Javascript test runner for nodejs and browsers= 2.60.0NVD